CVE-2023-22642
- EPSS 0.09%
- Veröffentlicht 11.04.2023 17:15:08
- Zuletzt bearbeitet 21.11.2024 07:45:06
An improper certificate validation vulnerability [CWE-295] in FortiAnalyzer and FortiManager 7.2.0 through 7.2.1, 7.0.0 through 7.0.5, 6.4.8 through 6.4.10 may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the c...
CVE-2022-42477
- EPSS 0.05%
- Veröffentlicht 11.04.2023 17:15:07
- Zuletzt bearbeitet 21.11.2024 07:25:03
An improper input validation vulnerability [CWE-20] in FortiAnalyzer version 7.2.1 and below, version 7.0.6 and below, 6.4 all versions may allow an authenticated attacker to disclose file system information via custom dataset SQL queries.
CVE-2023-25611
- EPSS 0.13%
- Veröffentlicht 07.03.2023 17:15:12
- Zuletzt bearbeitet 21.11.2024 07:49:49
A improper neutralization of formula elements in a CSV file vulnerability in Fortinet FortiAnalyzer 6.4.0 - 6.4.9, 7.0.0 - 7.0.5, and 7.2.0 - 7.2.1 allows local attacker to execute unauthorized code or commands via inserting spreadsheet formulas in m...
CVE-2023-23776
- EPSS 0.07%
- Veröffentlicht 07.03.2023 17:15:12
- Zuletzt bearbeitet 21.11.2024 07:46:48
An exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in FortiAnalyzer versions 7.2.0 through 7.2.1, 7.0.0 through 7.0.4 and 6.4.0 through 6.4.10 may allow a remote authenticated attacker to read the client machine pa...
CVE-2022-27490
- EPSS 0.25%
- Veröffentlicht 07.03.2023 17:15:11
- Zuletzt bearbeitet 21.11.2024 06:55:49
A exposure of sensitive information to an unauthorized actor in Fortinet FortiManager version 6.0.0 through 6.0.4, FortiAnalyzer version 6.0.0 through 6.0.4, FortiPortal version 6.0.0 through 6.0.9, 5.3.0 through 5.3.8, 5.2.x, 5.1.0, 5.0.x, 4.2.x, 4....
CVE-2022-30304
- EPSS 0.27%
- Veröffentlicht 16.02.2023 19:15:12
- Zuletzt bearbeitet 21.11.2024 07:02:32
An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiAnalyzer versions prior to 7.2.1, 7.0.4 and 6.4.8 may allow a remote unauthenticated attacker to perform a stored cross site scripting (XSS) attack via the ...
CVE-2022-38377
- EPSS 0.16%
- Veröffentlicht 25.11.2022 16:15:10
- Zuletzt bearbeitet 21.11.2024 07:16:21
An improper access control vulnerability [CWE-284] in FortiManager 7.2.0, 7.0.0 through 7.0.3, 6.4.0 through 6.4.7, 6.2.0 through 6.2.9, 6.0.0 through 6.0.11 and FortiAnalyzer 7.2.0, 7.0.0 through 7.0.3, 6.4.0 through 6.4.8, 6.2.0 through 6.2.10, 6.0...
CVE-2022-39950
- EPSS 0.73%
- Veröffentlicht 02.11.2022 12:15:55
- Zuletzt bearbeitet 21.11.2024 07:18:32
An improper neutralization of input during web page generation vulnerability [CWE-79] exists in FortiManager and FortiAnalyzer 6.0.0 all versions, 6.2.0 all versions, 6.4.0 through 6.4.8, and 7.0.0 through 7.0.4. Report templates may allow a low priv...
CVE-2022-26121
- EPSS 0.3%
- Veröffentlicht 10.10.2022 14:15:09
- Zuletzt bearbeitet 21.11.2024 06:53:28
An exposure of resource to wrong sphere vulnerability [CWE-668] in FortiAnalyzer and FortiManager GUI 7.0.0 through 7.0.3, 6.4.0 through 6.4.8, 6.2.0 through 6.2.9, 6.0.0 through 6.0.11, 5.6.0 through 5.6.11 may allow an unauthenticated and remote at...
CVE-2022-27483
- EPSS 5.37%
- Veröffentlicht 19.07.2022 14:15:08
- Zuletzt bearbeitet 21.11.2024 06:55:48
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiManager version 7.0.0 through 7.0.3, 6.4.0 through 6.4.7, 6.2.x and 6.0.x and FortiAnalyzer version 7.0.0 through 7.0.3, version 6.4.0 throu...